General

  • Target

    JaffaCakes118_621b3875992587930d9c14e304c129db

  • Size

    390KB

  • Sample

    250107-pceecazraz

  • MD5

    621b3875992587930d9c14e304c129db

  • SHA1

    cc48665a33b5d38d67e39403838403848e717694

  • SHA256

    c2c8a797d07a926cff0f71d72c83052bb2969aba8af9fb9ccaaea11e37142487

  • SHA512

    a263ba8a9f20eb44ee9f73c41164ef54f93d20c63d71cb6a5bc8b8a36c6eac25357e6988f0878ff36c968f1177469b3f456ef6a12d338d0312cdb5f0504c027a

  • SSDEEP

    12288:RQXVTJpWBGzp5k8nsfomgOBw8vOIdDEkBWPL:2JJm

Malware Config

Extracted

Family

redline

Botnet

@alexsandrovnaaaaaa

C2

ananasalit.xyz:81

Attributes
  • auth_value

    55d48a1a930cf4d6f3e2d6bcd0daaf07

Targets

    • Target

      JaffaCakes118_621b3875992587930d9c14e304c129db

    • Size

      390KB

    • MD5

      621b3875992587930d9c14e304c129db

    • SHA1

      cc48665a33b5d38d67e39403838403848e717694

    • SHA256

      c2c8a797d07a926cff0f71d72c83052bb2969aba8af9fb9ccaaea11e37142487

    • SHA512

      a263ba8a9f20eb44ee9f73c41164ef54f93d20c63d71cb6a5bc8b8a36c6eac25357e6988f0878ff36c968f1177469b3f456ef6a12d338d0312cdb5f0504c027a

    • SSDEEP

      12288:RQXVTJpWBGzp5k8nsfomgOBw8vOIdDEkBWPL:2JJm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks